62908238f6de1e81bd0fa73bdb7a6f9a4b1f96caae7160949d35714bcd868aa0 | Triage

Analysis

max time kernel
132s
max time network
142s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
12-05-2024 01:17

Sharing

Report Analysis Logs

General

Target

62908238f6de1e81bd0fa73bdb7a6f9a4b1f96caae7160949d35714bcd868aa0.exe
Size

50KB
MD5

01ea8bef669a207c4369a4416f90825c
SHA1

94e1f2adffc0dfdb16a1225734f8fd6c694f9c29
SHA256

62908238f6de1e81bd0fa73bdb7a6f9a4b1f96caae7160949d35714bcd868aa0
SHA512

8b444d0af298ac56b0b8b789b598620c608b1bad70bb83ec3c9f6451822c90a481bdc2811a3bea4ced239930f99dda2082da11638d6e5d400ac60037e93bedc4
SSDEEP

768:Zd5O9ZwyKCXv6KjdGRsezw5zqKqN3DYjaeWKq3GGYl3T97pyKS/U3l/KiQKFoVTl:/5O9ZwyKUvdk9mGY3x/KdKqqGl

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

C:\Users\Admin\AppData\Local\Temp\62908238f6de1e81bd0fa73bdb7a6f9a4b1f96caae7160949d35714bcd868aa0.exe
"C:\Users\Admin\AppData\Local\Temp\62908238f6de1e81bd0fa73bdb7a6f9a4b1f96caae7160949d35714bcd868aa0.exe"
1⤵
PID:3048

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3048-0-0x0000000000090000-0x0000000000091000-memory.dmp

Filesize
4KB

Download